Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e98e58e-ea1f-3b53-a1b1-5730a1ac7c2b.roa
File: 3e98e58e-ea1f-3b53-a1b1-5730a1ac7c2b.roa (raw, json)
Hash identifier: K3BHv9z8Mgu7M8WQZ0T/CPwSsUJuQLRFLE8LC0aP2gU=
Subject key identifier: 56:3D:E1:45:77:17:6E:F6:9B:AD:98:63:3E:F7:53:6D:5D:20:42:AC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F88A9E0043083C9032580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e98e58e-ea1f-3b53-a1b1-5730a1ac7c2b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 73.191.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:88:a9:e0:04:30:83:c9:03:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b0302355-e6a4-492d-bf16-f62cd5d06f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:0d:88:d4:6d:c9:5e:71:ac:d2:1f:66:f0:
34:a5:9e:66:4a:78:4b:88:7b:f0:28:8d:6e:e8:4d:
4f:06:19:93:ee:72:47:d7:04:b0:34:69:d0:48:65:
be:f4:e0:e3:d2:6c:dc:6c:a8:be:ed:7a:a7:34:a6:
c5:03:8e:ab:98:52:74:0b:f4:e5:80:5f:ed:30:70:
37:04:a7:3a:0f:70:f8:05:38:2d:d1:31:21:26:a6:
c8:6c:9a:0c:81:55:f5:10:d5:0f:00:45:61:ff:71:
9e:c7:d2:83:4b:ab:85:8e:c5:74:3c:c7:6c:48:98:
96:9e:64:5c:15:f2:b9:e2:69:a1:f5:04:2e:55:b0:
46:0f:ec:9b:a8:a0:ca:40:cb:af:1e:77:ab:e1:5e:
6f:05:50:91:91:12:73:ad:88:48:00:67:1b:5f:83:
bc:15:11:92:00:7e:66:ec:2c:f3:08:68:a9:b8:52:
df:36:ee:97:8a:6a:89:a0:c1:c1:e9:56:ba:ac:69:
62:67:f6:1c:59:e2:fc:8d:db:d7:1a:c1:fb:74:ab:
0a:20:ff:95:d2:fa:3a:25:c6:3e:8c:f2:37:71:22:
7c:c6:83:8b:65:5b:74:13:07:02:b9:e5:c9:ca:5f:
3e:db:f9:a6:8c:b7:c3:da:0b:49:54:f5:64:aa:36:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3D:E1:45:77:17:6E:F6:9B:AD:98:63:3E:F7:53:6D:5D:20:42:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e98e58e-ea1f-3b53-a1b1-5730a1ac7c2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.191.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ef:85:3a:ce:c3:8f:f9:66:08:93:63:b8:4a:d8:93:f6:60:
08:a9:eb:0a:37:66:3c:07:b4:63:3a:f5:67:67:bb:96:b6:6a:
bd:27:03:f1:22:5d:35:72:ae:77:e2:d4:b9:df:98:70:ff:35:
06:95:b4:0b:c9:09:2c:38:1e:93:41:97:a8:84:a0:18:60:76:
3c:6a:41:52:19:73:23:f9:59:83:37:b6:e1:c9:94:c5:bf:e4:
11:73:50:7c:b4:f2:16:30:20:0c:5d:74:86:ce:6a:b7:6f:ec:
a7:67:84:87:24:c5:9b:62:eb:16:33:75:aa:c3:e2:d3:c8:76:
16:94:67:c3:1e:aa:58:17:2b:0d:84:a8:cb:a0:1e:f2:8a:c2:
7f:46:a4:b1:b9:9f:f5:61:fe:5c:e6:1d:45:17:a6:1f:d4:45:
2b:2c:66:84:bf:e1:ca:32:84:33:2e:b1:12:7f:7c:af:37:e1:
93:b5:69:d8:7a:df:f0:a1:ca:77:3d:36:39:d7:94:da:6d:6c:
82:2e:50:92:c7:6f:89:84:e7:3e:ae:3d:b2:06:57:29:44:59:
f5:39:a0:11:0e:03:70:c3:aa:94:90:53:ce:11:09:11:f7:ce:
83:66:02:26:d0:38:00:3a:27:f1:7a:1f:58:90:97:a1:28:d6:
cc:71:28:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUP4ip4AQwg8kDJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YjAzMDIzNTUtZTZhNC00OTJkLWJmMTYtZjYyY2Q1ZDA2ZjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBoNiNRtyV5xrNIfZvA0pZ5mSnhLiHvwKI1u
6E1PBhmT7nJH1wSwNGnQSGW+9ODj0mzcbKi+7XqnNKbFA46rmFJ0C/TlgF/tMHA3
BKc6D3D4BTgt0TEhJqbIbJoMgVX1ENUPAEVh/3Gex9KDS6uFjsV0PMdsSJiWnmRc
FfK54mmh9QQuVbBGD+ybqKDKQMuvHner4V5vBVCRkRJzrYhIAGcbX4O8FRGSAH5m
7CzzCGipuFLfNu6XimqJoMHB6Va6rGliZ/YcWeL8jdvXGsH7dKsKIP+V0vo6JcY+
jPI3cSJ8xoOLZVt0EwcCueXJyl8+2/mmjLfD2gtJVPVkqjaNZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFY94UV3F272m62YYz73U21dIEKsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U5OGU1OGUtZWExZi0z
YjUzLWExYjEtNTczMGExYWM3YzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb/8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvvhTrOw4/5ZgiTY7hK2JP2YAip6wo3ZjwHtGM69Wdnu5a2ar0nA/Ei
XTVyrnfi1LnfmHD/NQaVtAvJCSw4HpNBl6iEoBhgdjxqQVIZcyP5WYM3tuHJlMW/
5BFzUHy08hYwIAxddIbOardv7KdnhIckxZti6xYzdarD4tPIdhaUZ8MeqlgXKw2E
qMugHvKKwn9GpLG5n/Vh/lzmHUUXph/URSssZoS/4coyhDMusRJ/fK834ZO1adh6
3/Chync9NjnXlNptbIIuUJLHb4mE5z6uPbIGVylEWfU5oBEOA3DDqpSQU84RCRH3
zoNmAibQOAA6J/F6H1iQl6Eo1sxxKBc=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:51 2025 by rpki-client